Lilly Consultant-Information Security in Indianapolis, Indiana

46798BR

Responsibilities:

  • Technical authority for Lilly’s CASB (Symantec CloudSOC) and related cloud security services, including designing and crafting effective access control and monitoring of cloud services consumed by Lilly users as well as leadership for continuous improvement efforts over time

  • Build relationships with external vendors to design, test, and implement technical solutions for Internet and cloud access controls

  • Builds business cases and influences management on purchase decisions

  • Mentors junior employees and contract workers or vendors on proper support for these services

  • Resolves technical problems brought up from Security Operations as they relate to various components of the CloudSOC CASB and related security services

  • Ensure logs from CloudSOC CASB and related cloud security services are consumable for Security Operations to detect abnormal activity

  • Develop automated configuration and governance checks to enable reporting metrics and validation of the services

  • Understands Symantec (Blue Coat) proxy and content filtering technologies to appropriately engineer and design cloud security solutions to complement

  • Owns the support and the management of the Symantec CloudSOC CASB and related security services

  • Leads the troubleshooting and investigation of CASB-related errors and incidents

  • Stays ahead of new and emerging Internet security technology trends and innovations - working closely with architects to find opportunities to improve existing services

  • Facilitate the development and integration of new capabilities into Lilly’s Internet security controls

  • Maintains alignment with cloud domain security architect on tool and service positioning

  • Assist in the creation and maintenance of cloud hardening guides and internal CloudSOC CASB service documentation

  • Facilitate the development and integration of new capabilities into Lilly’s Internet security controls

  • Maintains alignment with cloud domain security architect on tool and service positioning

  • Assist in the creation and maintenance of cloud hardening guides and internal CloudSOC CASB service documentation

Req ID:

46798BR

Additional Skills/Preferences:

  • Experience with ITIL and operation of IT services

  • Good interpersonal skills, including the ability to explain complex technical topics to a non-technical audience (including senior leadership)

  • Experience with change, incident, and problem management in ServiceNow or other ITSM system

  • Experience and expertise with security technologies such as proxies, firewalls, antivirus, IDS, content filtering, security incident and event management (SIEM), encryption solutions

  • Advanced abilities to apply good risk-based discernment to complex problems

  • Ability to think analytically and to understand and communicate quantitative information

  • One or more Information Security, Development or Cloud certifications such as: CISSP, CCSP, CCSK, CSSLP, Security+, SANS, CEH or AWS

  • Experience in assessing the risk of a proposed solution, intensifying appropriately and working towards closure

  • Knowledge of Lilly Risk Management and Information Security processes

  • Knowledge of industry security standards such as NIST 800-53, ISO 27001, and CSA Cloud Controls Matrix

  • Expertise working in complex, diverse landscapes (business, technology, regulatory, partners, providers, geographies)

  • A solid grasp of how to model threats & risk as well as the controls necessary to mitigate risk

  • Experience with DevOps practices such as infrastructure as code, continuous integration and continuous deployment, and delivery pipelines

  • Experience utilizing scripting languages, API integrations, and JSON structures

  • Proven high level of intellectual curiosity, external perspective and innovation interest

Additional Information:

  • Lilly is an EEO/Affirmative Action Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.

Title:

Cloud Security Consultant

Job Category:

Information Technology

Basic Qualifications:

  • Bachelor’s degree in a discipline related to information systems and 5+ years related work experience

  • Advanced experience working with cloud security technologies such as CASB and Workload Protection

  • Expertise in security design, development and engineering with respect to cloud architecture (including AWS, Azure and/or O365 services)

Company Overview:

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our 39,000 employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.

The Information Security organization has a mission to protect the confidentiality, integrity and availability of information that enables Lilly’s organizational mission to make medicines that help people live longer, healthier, more active lives.

Like all enterprises, Lilly is embracing Internet services and cloud-based resources to power a global network as Lilly will never host all data and capabilities needed for our workforce to deliver on our promise. However, it is our dedication to utilize the Internet in an appropriately secure manner, and to do that we should know the connections we make and the data we transfer over the Internet has the appropriate level of controls.

As Cloud Security Consultant, you are the technical authority for these services. You will build relationships and work closely with vendors to tailor and implement technical solutions as well as to work with operational resources to effectively own the service. Understanding of how Lilly users access cloud services and implications of changes to those services is essential to your success in the role.

City:

Indianapolis

Country:

USA

State / Province:

Indiana

Region:

North America